5.1.7.3 (c) 2018 The Christian Science Board of Directors

Privacy Policy

PRIVACY POLICY
Last Updated on September 13, 2017

In this Privacy Policy, “Terms of Service” means Our Terms of Service applicable to the BETA
testing site of Concord Online (“BETA Service”), as may be modified from time to time and
currently found at login.concord.christianscience.com/terms. “Personally Identifiable Information”
means any information that We possess that can be used to distinguish or trace the identity of a
BETA Service user; other capitalized terms have the meanings given them in the Terms of
Service.

Your privacy is important to Us. Therefore, We are committed to respecting Your privacy and
the confidentiality of Your Data and Personally Identifiable Information. This Privacy Policy is
designed to assist You in understanding how We use and safeguard the information You
provide in using the BETA Service.

1. What information do We collect?
In order to provide You with access to the BETA Service, We may gather and process some or
all of the following information:

Registration Information: any information provided when voluntarily registering for use of the
BETA Service, including, but not limited to, username, password, and email address.

Your Data: any text, information, data, or other materials made available, collected, or stored by
You as a user of the BETA Service, other than Registration Information, Customer Service
Communications, or Navigation and Analytics Information.

Customer Service Communications: any information that is reported to Us about the operation
of the BETA Service, including bug reports or requests for enhancements.

Navigation and Analytics Information: The BETA Service automatically records basic information
that Your browser, computer or device sends, and collects information about Your use of the
BETA Service captured through cookies and other electronic technologies (see Sections 2 and
6) while You are visiting the BETA Service.

2. How do We use this information and for what purpose?
Our primary purpose in collecting information is to provide You with an efficient user experience.
We may use the information defined in this Privacy Policy to:
• Provide the Service and customer support.
• Verify Your identity.
• Troubleshoot problems.
• Enforce Our Terms of Service or resolve disputes.
• Notify You about changes and updates to the BETA Service.
• Customize, measure, and improve the BETA Service content and layout.
• Compare information for accuracy.
• Combine with other information, including personal information, obtained from Your other
interactions with TFCCS and its service providers, including Your subscriptions, product
purchases, website visits, or other communications. We may use this information to
personalize the content and advertising that We send You or that You see on the BETA
Service or Our other sites, and to share Your information with any of Our affiliates or
service providers in order to provide the BETA Service or advertising or to communicate
with You on Our behalf.
• Email You about targeted marketing and promotional offers from The First Church of
Christ, Scientist or The Christian Science Publishing Society, and provide other services
for You as described when We collect the information. You may opt-out of receiving
these email messages through the link provided in such communications.

Additionally, We may use Your information as described below.

Registration Information
We ask for Registration Information in order to verify Your identity and to enable Your use of the
BETA Service. Although the BETA Service is currently not a paid product, in the future should
we opt to charge subscription or other fees, we will use third-party banking organizations and
other providers of payment services to You, and in that case, You are providing the necessary
payment processing information directly to such provider(s).

We respect the privacy of personal e-mail accounts, and We will store Your
e-mail addresses just as securely as Your other data and Personally Identifiable Information.
Your Registration Information will not be passed to unaffiliated third parties for their marketing
purposes without Your explicit permission. We will use e-mail to send You messages about:

• BETA Service faults and issues
• Any claims related to Your use of the BETA Service, including without limitation claims of
violation of third-party rights
• News about the BETA Service, and
• Other products We or Our affiliates offer. You may opt-out of receiving promotional email
messages through the link provided in such communications.

Your Data
Your Data, such as notes, compilations, and search information stored in the BETA Service, is
treated as private information. We take measures both technologically and through policy to
restrict those who administer the BETA Service from having access to your Your Data.

However, if required by law or reasonably necessary for the efficient operation of the service,
We reserve the right to flag, filter, modify, refuse, remove, or disclose any or all of Your Data
from the BETA Service.

Although we treat Your Data as private, the BETA Service should not be used for You to store
sensitive or regulated data, such as Your or another’s Personally Identifiable Information, health
information under HIPPA, or financial information under the Gramm-Leach-Bliley Act, and you
should not submit such data to the BETA Service.

Customer Service Communications
Information, which is voluntarily submitted in feedback, is used for the purposes of reviewing
this feedback and improving the Service. We reserve the right to utilize anonymous information
for marketing purposes, for instance, by displaying selected anonymous comments on Our
website or in other communications. Further, We may from time to time ask You to provide
information on Your experiences, which will be used to measure and improve quality. You are at
no time under any obligation to provide such data. We will never use any personally identifiable
(feedback) information without Your explicit permission.

Navigational and Analytics Information
As You navigate the Beta Service, We may collect information through the use of
commonly-used information-gathering tools, such as cookies and Web beacons. These tools
collect standard information from Your Web browser, such as browser type and browser
language, Your Internet Protocol (“IP”) address, date and time of Your request, and an
authentication token to validate the identity of You and Your computer or device. We also collect
anonymous, aggregated statistics on the Web pages You view and links You click. We use
these cookies or similar technologies to analyze trends, administer the BETA Service, track
users’ movements around the BETA Service and TFCCS’s affiliated websites, and gather
demographic information about our user base as a whole. (See Section 6 below on cookies and
similar technologies).

3. To whom do We transfer Your Personally Identifiable Information?
Except as provided below, We shall not sell, rent, trade, or otherwise transfer any of Your Data
and Personally Identifiable Information to any third party without Your permission, unless We
are obliged to do so under applicable laws or requested or required to do so by law enforcement
or other competent authorities.

We may supply subscriptions and Content through service providers. Subscriptions are
processed by third parties on Our behalf, and such third parties collect and store billing and
credit card information solely to process these purchases. This information will not be used for
any other reason except as instructed by Us. Registration Information that You provide to Us
may be sent to service providers in order to deliver the service provided by them; similarly,
Personally Identifiable Information (except credit card information) that You provide to those
sites may be sent to Us in order to operate the BETA Service or otherwise use according to
these Terms.

Information collected by Us may be stored and processed in any country in which We and Our
affiliates maintain facilities. We reserve the right to transfer information outside of the country
where You reside and/or from which You use the BETA Service. By using the BETA Service,
You consent to any such transfer of information. We may collect anonymous, aggregated data
from Our website and provide it to Our service providers to help Us with Our market research
and statistical purposes. Concord Online may use such information to help determine ways to
improve the BETA Service. Concord Online reserves the right to publish non-personally
identifiable, summary information regarding its website visitors for promotional purposes and as
a representative audience for advertisers. Please note that this is not Your Data and Personally
Identifiable Information, only general summaries of the activities of Our visitors and customers.

Notwithstanding anything to the contrary in this Privacy Policy or the Terms of BETA Service,
We may access, use, preserve, or disclose any information We have access to if We have a
good faith belief that such access, use, preservation, or disclosure of any information is
reasonably necessary to (a) satisfy any applicable law, regulation, legal process, or enforceable
governmental request, (b) enforce the Terms of BETA Service, including investigation of
potential violations thereof, (c) detect, prevent, or otherwise address fraud, security or technical
issues, or (d) protect against imminent harm to the rights, property or safety of Us, our users, or
the public as required or permitted by law.

4. How do We protect Your Data and Personally Identifiable Information?
We take reasonable administrative, technical, and physical security measures to protect against
the unauthorized access, destruction or alteration of Your Data and Personally Identifiable
Information, which will remain in the Service until You delete it or the Church decides to
terminate the account per the Terms and Conditions and Privacy Policy.

Although We encrypt Your Data and password and encrypt the traffic between our servers and
Your browser, You should be aware that Internet communications are not always secure.
Please consider this as you enter Your Data into the BETA Service.

Also, keep in mind that Our security measures may be rendered ineffective if you fail to maintain
the confidentiality of Your username and password. By using the BETA Service, You accept full
responsibility for any harm resulting from Your failure to maintain such confidentiality.

5. How long is Your Data and Personally Identifiable Information kept by Us?
We will retain Your information for as long as is necessary to:

• Provide the use of the BETA Service
• Communicate with You regarding the BETA Service or other services that We offer
• Comply with applicable laws, regulatory requests, and orders from competent authorities
• Enforce Our Terms
• Fulfill any of the other purposes detailed in this Privacy Policy.

6. What are cookies and related electronic technologies, and how do We use them?
"Cookies" are text files stored on Your computer or device that provide functionality for the
BETA Service and help the BETA Service to gather Navigation and Analytics Information.

When You use the BETA Service, We, or Our service providers may place or access persistent
and session cookies, browser storage, and other tracking technologies to: (a) store Your
username (i.e., e-mail address), name, and other account information; (b) analyze the usage of
the BETA Service; and (c) customize the BETA Service to Your preferences. Cookies may
reflect anonymized demographic or other data linked to data You voluntarily have submitted to
us, e.g., Your e-mail address, in hashed, non-human readable form.

We and Our service providers may also use other Internet technologies, such as web beacons
or pixel tags, and other similar technologies, to deliver or communicate with cookies and track
Your use of the BETA Service and TFCCS’s affiliated websites (including to serve You ads
when You are on other websites or the Internet when We can access those cookies). We also
may include web beacons in e-mail messages or newsletters to determine whether You opened
them. Web beacons allow Us to understand the time and date of when You have opened an
e-mail and when You have utilized a link within the e-mail to visit a website. Our web beacons
do not collect Personally Identifiable Information. If You wish to disable web beacons, You
should do so by turning images "off" in Your e-mail client. Please see Your e-mail client for more
information. As We adopt additional technology, We may also gather additional information
through other methods.

We also use these automated technologies to collect and analyze: (a) information related to the
devices You use to access or interact with the BETA Service, such as: geolocation information,
unique device identifiers and other information about Your mobile phone or other mobile
device(s), browser type, browser language; and (b) information related to the ways in which You
interact with the BETA Service, such as: referring and exit pages and URLs, platform type, IP
addresses, the number of clicks, domain names, landing pages, pages viewed and the order of
those pages, the amount of time spent on particular pages, the date and time You used the
BETA Service, and other similar information. We may also capture other data, such as search
criteria and results. In some cases, We will associate this information with a unique identifier
(that cannot be used by itself to identify You) for analytics purposes.

Most browsers automatically accept cookies, but You can modify Your browser setting to
decline cookies, or to alert You when cookies are being sent, by visiting the Help portion of Your
browser’s toolbar. If You choose to decline cookies, please note that You may not be able to
sign in, customize, or use some of the interactive features of the BETA Service.

7. How far does Our responsibility extend?
This Privacy Policy applies solely to information collected by the BETA Service. We do not
exercise control over nor do We accept responsibility or liability for other users or websites. In
addition, the BETA Service may contain links to our affiliated sites which have their own privacy
policies.

8. Users from outside the United States
This BETA Service is hosted in the United States and is governed by United States law. If You
are using the BETA Service from outside the United States, please be aware that Your
information may be transferred to, stored and processed in the United States where our servers
are located and Our databases are operated. The data protection and other laws of the United
States and other countries might not be as comprehensive as those in Your country. By using
the BETA Service, You consent to Your information being transferred to Our facilities and to the
facilities of those third parties with whom We share it as described in Our Privacy Policy.

9. Children
The BETA Service does not knowingly collect Your Data and Personally Identifiable Information
from children under the age of 13 without parental consent. If it is learned that such information
has been collected without parental consent, that information will be deleted from the BETA
Service’s database as quickly as practical or the child’s parent or guardian will be contacted for
consent.

We recommend minors under the age of 18 ask a parent for permission before sending
personal information over the Internet. We encourage parents to teach their children about safe
Internet practices and to be involved in their children’s online activities.

10. California Do Not Track Disclosure
The BETA Service does not currently respond to Do Not Track (DNT) signals.

11. No rights of third parties
This Privacy Policy does not create rights enforceable by third parties.

12. Can this Privacy Policy be modified?
TFCCS reserves the right to change this Privacy Policy at any time. Any material changes to
this Privacy Policy will be effective upon the earlier of thirty (30) calendar days following Our
dispatch of an email notice to You or thirty (30) calendar days following Our posting of notice of
the changes on the BETA Service. These changes will be effective on the posted effective date.
Please note that at all times You are responsible for updating Your information to provide Us
with Your most current email address. In the event that the last email address that You have
provided Us is not valid, or for any reason is not capable of delivering to You the notice
described above, Our dispatch of the email containing such notice will nonetheless constitute
effective notice of the changes described in the notice. If You do not wish to permit changes in
Our use of Your information, You must deactivate Your account. Continued use of the BETA
Service following notice of such changes shall indicate Your acknowledgement of such changes
and agreement to be bound by the changed Privacy Policy.

13. What rights do You have and how can You contact Us?
If You would like to exercise Your right to view, correct, complete, or remove Your Personally
Identifiable Information, please contact Us at concordbeta@csps.com. Upon verification of Your
identity, We will attempt to quickly fulfill Your request.